CVE-2016-4784

mediumpriority · track · 22OT risk · elevatedEPSS 0.027 · 86 %ileEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.68% (86th) EPSS
CVSS 5 · medium
Is it mine?
15 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · scored 2026-10-22

A vulnerability has been identified in firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Modbus TCP for EN100 Ethernet module : All versions < V1.11.00; Firmware variant DNP3 TCP for EN100 Ethernet module : All versions < V1.03; Firmware variant IEC 104 for EN100 Ethernet module : All versions < V1.21; EN100 Ethernet module included in SIPROTEC Merging Unit 6MU80 : All versions < 1.02.02; SIPROTEC 7SJ686 : All versions < V 4.83; SIPROTEC 7UT686 : All versions < V 4.01; SIPROTEC 7SD686 : All versions < V 4.03; SIPROTEC 7SJ66 : All versions < V 4.20. The integrated web server (port 80/tcp) of the affected devices could allow remote attackers to obtain sensitive device information if network access was obtained.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • FixedEN100 Ethernet modules as optional for Reyrollecisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-452237 at the following location:

  • FixedFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.03 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Install V1.21 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Install V1.11.00 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Install V1.04.01 - Download: https://support.industry.siemens.com/cs/us/en/view/109745821

    https://support.industry.siemens.com/cs/us/en/view/109745821
  • FixedSIPROTEC 7SJ66cisa_csaf_ot

    Install V 4.20 - Download: https://support.industry.siemens.com/cs/gb/en/view/109743555

    https://support.industry.siemens.com/cs/gb/en/view/109743555
  • FixedIEC 61850 firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • FixedTPOP firmwarecisa_csaf_ot

    In addition, ICS-CERT recommends that users take the following measures to protect themselves from social engineering attacks:

  • MitigationEN100 Ethernet module included in SIPROTEC 4cisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationEN100 Ethernet module included in SIPROTEC Compactcisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact model 7SJ80 with Ethernet Service Interface on Port A Firmwarecisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact models 7RW80 with Ethernet Service Interface on Port Acisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact models 7SJ81 with Ethernet Service Interface on Port Acisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationSIPROTEC Compact models 7SK81 with Ethernet Service Interface on Port Acisa_csaf_ot

    For more information on these vulnerabilities and more detailed mitigation instructions, please see Siemens Security Advisory SSA-547990 at the following location: (http://www.siemens.com/cert/advisories)

    http://www.siemens.com/cert/advisories
  • MitigationEN100 Ethernet module included in SIPROTEC Merging Unit 6MU80cisa_csaf_ot

    Install V1.02.02 - Download: Please contact the Siemens hotline at support.energy@siemens.com

  • MitigationFirmware variant DNP3 TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant IEC 104 for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant Modbus TCP for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationFirmware variant PROFINET IO for EN100 Ethernet modulecisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SD686cisa_csaf_ot

    Install V 4.03 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=64

  • MitigationSIPROTEC 7SJ66cisa_csaf_ot

    Siemens has identified the following specific workarounds and mitigations thatcustomers can apply to reduce the risk: Restrict network access to port 80/TCP and port 50000/UDP

  • MitigationSIPROTEC 7SJ686cisa_csaf_ot

    Install V 4.83 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=51

  • MitigationSIPROTEC 7UT686cisa_csaf_ot

    Install V 4.01 - Download: http://www.siemensenergysector.com/ProductRelatedDown.aspx?ProductId=68

02

cvss

Technical severity, 0–10. One row per scoring source.

5.3
010

base score 0–10 · higher = more severe · hover a vector to decode

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 10 · impact 2.9
v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 1.4
v3.05.3mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nsecondary · CISA US
v3.04.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USprimaryCWE-200USCWE-287USCWE-862US
04

affected products (15)

Products and version ranges known to be affected.

05

advisories (4)

Vendor and ecosystem advisories describing this.

  • ICSA-16-140-02Siemens SIPROTEC Information Disclosure Vulnerabilities (Update B)2016-02-20icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

  • ICSA-17-187-02Siemens Reyrolle2017-07-06icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

  • ICSA-17-187-03FICSA-17-187-03F Siemens SIPROTEC 4 and SIPROTEC Compact (Update F)2017-07-04icsa · cisa_csaf_otUS

    CISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.

  • ICSA-17-334-01Siemens SWT30002017-11-30icsa · cisa_csaf_otUS

    ATTENTION: Remotely exploitable/low skill level to exploit.

06

also known as (3)

Other names and identifiers for this entity.

07

sources

Which sources assert this record, and when.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
published 2016-05-31modified 2026-06-17
09

references (15)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan